Microsoft Endpoint Manager Uninstalling itself for no reason.

Question

My server keeps uninstalling itself and deleting the database and I can't find the reason. If I install everything, even without configuring any kind of routine or update, just leave it there. the next day everything is removed.

The ConfigMgrSetup.log shows:

<12-09-2021 07:48:53> ********************************************* 01/01/1601 00:00:00 24401 (0x5F51)
<12-09-2021 07:48:53> ***** ConfigMgr Setup Bootstrapper ***** 01/01/1601 00:00:00 24332 (0x5F0C)
<12-09-2021 07:48:53> ********************************************* 01/01/1601 00:00:00 24263 (0x5EC7)
<12-09-2021 07:48:53> Commandline: 01/01/1601 00:00:00 24194 (0x5E82)
<12-09-2021 07:48:53> "C:\Program Files\Microsoft Configuration Manager\bin\x64\SetupWpf.exe" /DEINSTALL /HIDDEN 01/01/1601 00:00:00 24158 (0x5E5E)
<12-09-2021 07:48:53> INFO: Checking dotnet framework versions... 01/01/1601 00:00:00 24043 (0x5DEB)
<12-09-2021 07:48:53> INFO: Dotnet 3.5 installed 01/01/1601 00:00:00 23976 (0x5DA8)
<12-09-2021 07:48:53> Starting SetupWpf.exe... 01/01/1601 00:00:00 23926 (0x5D76)

And then proceeds with the uninstallation.

I have no idea why the server is running that command!

Answer 1

Go through all Task Scheduled tasks in MMC of Task Scheduler. From the log I bet it only uninstalls some component? Or are you really saying that entire Site and SQL DB is gone? It might be that this setupwpf.exe is a component of some obsolete role or something which is trying to remove itself. Did this start to happen after CM in-console upgrade?

Answer 2

The entire site is gone (happened three times already), including the database that is in different SQL server.

Yes, I'm thinking exactly that. I do believe it is related somehow to the CM console upgrade. The first couple of times, there was nothing in the logs, and today I found the one I posted which it the first clue I got.

I tried to open the console on my computer and it asked to update and then it didn't connect to the site. That happened around the time the uninstall command appears in the log.

I'm finishing the server recover process and will try again to see what happens.

Answer 3

Hi @IT EABH ,

It is really strange. We could use process monitor to check if any process to uninstall the entire site and database, for example, GPO or Task Scheduled tasks yanara mentioned.

Here is the link about process monitor:
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

@IT EABH since you have this continues problem, how about you then just start totally new server instance and install new CM totally as a new instance. Just kill the old server, but sure remember to transfer your all source files (apps, drivers, images etc.) on a new file share.

Answer 5

I did start a completely new server, and it happened again right before I posted the original question.

After my third server recovery I also uninstalled the console manager from my desktop. It's been a week and no problem at all.

I reckon that for some unknown reason, the client was sending that uninstall command to the server when it tried to update.